In order for the website managed by BCA to function properly, we sometimes install small data files called cookies on your device.

What are cookies?

Cookies are small text files that websites install on the computer or mobile device of the users who visit them.

First-party cookies are those generated by the website you are visiting and that can only be read by that website. In addition, a website can also use external services that generate their own cookies, known as third-party cookies.

Persistent cookies are those that are saved on your computer and are not automatically deleted when you exit the browser (unlike session cookies, which are deleted when you exit the browser).

Every time you visit the website managed by the BCA, you will be asked to accept or reject cookies.

The purpose is to remember your preferences (username, language, etc.) for a specified period. Thus, you do not have to indicate them again when browsing the pages of the site during the same visit. Cookies can also be used to compile anonymized statistics on the browsing experience on our websites.

How do we use cookies?

The website managed by the BCA mainly uses first-party cookies, generated and controlled by the BCA, and not by external organizations.

However, to view some of our pages you will have to accept cookies from external organizations.

The three types of first-party cookies that we use allow us to:

• store visitor preferences;
• keep our website running; and
• gather analytics data (on user behavior).

Visitors preferences

We generate them and no one else can read them. Register:

• whether the visitor has accepted (or rejected) the site's cookie policy; and
• if you have already responded to our pop-up survey on the usefulness of the content (so you will not be asked to do so again).

The cookies that preserve the preferences of the visitors are the following:

• Name: Services: Consent cookies — Purpose: Stores cookie usage preferences (so you do not have to be asked again) — Cookie type and duration: First-party cookie (it is deleted when you exit the browser)
• Name: Services: Site survey tools — Purpose: Stores information on whether a survey has already been answered in a pop-up window (so as not to insist that it be done) — Cookie type and duration: Persistent origin cookie (one month)

Operational cookies

Some cookies are necessary for the operation of certain web pages. For that reason, they do not require the consent of the user. Two types stand out:

Authentication cookies: They are stored when the user logs into a site managed by the BCA using our authentication service (BCA ----). By doing so, you agree to the corresponding privacy statement.

These are the authentication cookies:

• Name: Services: Identity management service — Purpose: Remember the user's domain — Cookie type and duration: First-party cookie (it is deleted when you exit the browser)
• Name: Services: Identity management service — Purpose: Identify the user's session — Cookie type and duration: First-party cookie (it is deleted when you exit the browser)
• Name: Services: Identity management service — Purpose: Identify the current session in the Central Authentication Service — Cookie type and duration: First-party cookie (it is deleted when you exit the browser)
• Name: Services: Identity management service — Purpose: Register user preferences and settings: ID. Username, Username, Confirmed Cookie Policy, High Contrast Mode, Privacy Mode, view account details after Login, Last Authentication Method Selected — Cookie type and duration: First-party cookie (it is deleted when you exit the browser)

For technical reasons, the names of these cookies may undergo changes (in particular, __Secure-CASTGC and __Secure-ECAS_SESSIONID).

The technical cookies that certain computer systems require are the following:

• Name: has_js — Services: Institutional content management platform, based on Drupal (open source software) — Purpose: Determines if JavaScript is enabled in the browser, which allows our websites to function properly — Cookie type and duration: First-party cookie (it is deleted when you exit the browser)
• Name: JSESSIONID / CFID / CFTOKEN — Services: Java / Coldfusion computing platforms — Purpose: Maintains a secure session during the user's visit — Cookie type and duration: First-party cookie (it is deleted when you exit the browser)
• Name: ecsi — Services: Site survey tools — Purpose: Stores information on whether a survey has already been answered in a pop-up window (so as not to insist that it be done) — Cookie type and duration: Persistent origin cookie (one month).

Analysis cookies

We use them exclusively for internal research purposes to determine how we can improve the service we provide to all users.

These cookies only evaluate, anonymously, how users interact with our website (the data collected does not allow their personal identification).

Furthermore, this data is not shared with third parties or used for any other purpose. Anonymized statistics could be shared with contractors working on communication projects under a contractual agreement with the BCA.

Now, the user is free to reject these types of cookies, either through the banner about cookies that appears in the first view of the page.

Analysis cookies are the following:

• Name: _pk_id# — Services: Institutional web page analysis service, based on Matomo (open source software) — Purpose: Recognizes website visitors (anonymously, without collecting personal information about the user) — Cookie type and duration: Persistent origin cookie (13 months)
• Name: _pk_ses# — Services: Institutional web page analysis service, based on Matomo (open source software). — Purpose: Identify the pages consulted by each user during the same visit (anonymously, without collecting personal information about the user) — Cookie type and duration: Persistent origin cookie (30 months)

Third party cookies

Some of our pages show content hosted by services contracted in domains external to the BCA, for example our contractor who assists in the management of the Contact Center ------. External hosting may need cookies to function.

• Cookie name: PHPSESSIONID — Service: Contact Form — Purpose: Session information (random number), used to process multilingual forms. No additional information has been stored — Cookie type and duration: Third party session cookie, defined by our contractor. It is deleted when you exit the browser.

Some of our pages show content from external providers, such as YouTube, Facebook, Twitter, etc.

To access third-party content, users must first accept the conditions that they apply (including their cookie policies, beyond our control).

If users choose not to access these contents, these third-party cookies are not installed on their devices.

Third-party providers on BCA websites:

• YouTube
• Internet Archive
• ScribbleLive
• Google Maps
• Twitter
• TV1
• Vimeo
• Microsoft
• Facebook
• Google
• LinkedIn
• Livestream
• SoundCloud

Third-party services are beyond the control of the BCA. Providers may modify at any time the conditions of service, purpose and use of their cookies, etc.

How to manage cookies?

Users can manage/delete cookies if they wish (more information at aboutcookies.org).

Delete cookies from the device

The cookies that are already on a device can be deleted by clearing the browser history, which deletes the cookies from all visited websites.

However, you may also lose some of the saved information (for example, login data or website preferences).

Manage site-specific cookies

To have more precise control over site-specific cookies, users can adjust their privacy and cookie settings in the browser.

Block cookies

Although most modern browsers can be configured to prevent cookies from being installed on devices, this may require the manual adjustment of certain preferences each time a site or page is visited. Furthermore, some services and functions may not work correctly (for example, profile logins).